Privacy Policy

What we collect

• Telegram ID / Gmail / Discord / Yandex / GitHub / Steam — for identification.
• Email address — if you signed in via a provider that returns one or entered it yourself.
• IP address and User-Agent — at sign-in time (login history) and at payment time (anti-fraud).
• Payment history — provider, amount, status, date.

• Traffic content. WireGuard / AmneziaWG / VLESS servers do not log DNS queries and do not write access logs.
• Browsing history.
• IP ↔ tunneled-request mappings (not stored).

• Payment providers — transaction data (Sber/Tinkoff for SBP, CryptoBot, LOLZ Market, NicePay, Pally, 1Plat, HeyTeaPay).
• Resend.com — email delivery for transactional notifications (US, GDPR DPA).
• Cloudflare — DNS, inbound email routing for contact@fiery.host (US).
• No one else. No advertising trackers.

• Account data (profile, email, identities) — while a subscription exists + 90 days after it ends, or until explicit deletion.
• Payment history — 3 years (tax authority requirement).
• Login history (IP + User-Agent) — 2 years, for account security.
• Email notifications log — indefinitely for audit; webhook events (delivered/bounced) — 90 days.
• Magic-link / email-change tokens — 15 / 30 minutes until use, then 7 days as a nonce to prevent reuse.
• VPN server logs — not written.

• Transactional (payment, expiry, security) — sent by default.
• You can disable notifications via "Email notifications" in your account (security alerts still arrive).
• Every email contains a one-click unsubscribe link (RFC 8058).
• On spam complaint / hard bounce the email is auto-unlinked and stops receiving messages.

• Delete your account yourself — button in /account (all PII is nulled, subscription ends, configs stop working).
• Request a data export via contact@fiery.host.
• Withdraw consent to data processing at any time.

contact@fiery.host · support chat in your account

Last updated: June 2026.